Mac Forensic Hardware

This is probably the number 1 question asked by everyone, whether they are a seasoned examiner or new to the profession.

What Macintosh do I need to buy?

Here are some short answers to the hardware question.

Why purchase a Mac at all? This question is easy. It the only computer that can run every operating system you will find in any situation. There is no other Intel or AMD based machine that can boast this. The Mac is the only computer that can run the MacOS, as well as all of the other operating systems available (Intel/AMD 32 or 64 bit).

For your Desktop, you need a Apple Mac Pro. Ignore the price tag for a moment (because you will find its cheaper than the Dell you want to compare it to.) The MacPro offers the ultimate in expansion, speed, and internal storage. You will likely not find a single case that can't be processed with this machine. If you do, you need more MacPro's. The MacPro is upgradable so the base system is the best buy and can be expanded to meet your needs.

For your travels, you need the Apple MacBook Pro. The Macbook simply doesn't offer the number of expansion ports a forensic investigator will require. Now, even the 15" Macbook Pro offers Firewire 800, and with the versatility of the ExpressCard slot, you can easily add eSATA or mobile high-speed internet. I personally like the 15" size over the 17" unless you need to use the laptop's screen for your everyday work screen. The 17" Macbook Pro has a huge foot print and in tight areas (airplane coach seats), it's huge.

Do I need a Apple MacBook Air for forensics? - I think you are nuts if you get one for this use. If you are trying to impress your friends, it won't work. It will be just as impressive to all of the guys on patrol when you pull up with a one seater patrol car that can go 250MPH. Great, but useless for the job WE need to do. Its a great ultra portable for the people that need minimization. We don't need that.

Other hardware that you will want to consider for your laboratory:

Write-blockers, flash drives, portable hard drives, USB hubs, cables of all types, and carry cases to lug all of your cool gear around.

Don't forget to use the Government or Education discount when you go to the Apple Store if you qualify. It’s not just for the online store.

Amazon offers discounts on many Apple items and you will also be supporting this site by shopping thru this link! See the Mac OS X Forensics Store for a more complete list of items that we recommend from Amazon.